Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

Dernière mise à jour de la database27 oct. 2026, 19:17 UTC

29critique, 7 derniers jours 411élevée, 7 derniers jours 649moyenne, 7 derniers jours 145faible, 7 derniers jours

ID	Vulnérabilité	Classée depuis	Publiée
SUSE-SU-2026:24333-1 élevée	Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24334-1 élevée	Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24335-1 élevée	Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24336-1 élevée	Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24337-1 élevée	Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24338-1 élevée	Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24339-1 élevée	Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24340-1 élevée	Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24341-1 élevée	Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24342-1 élevée	Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24343-1 élevée	Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24344-1 élevée	Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24345-1 élevée	Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24346-1 élevée	Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24347-1 élevée	Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24348-1 élevée	Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24349-1 élevée	Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24350-1 élevée	Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24351-1 élevée	Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24352-1 élevée	Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24353-1 élevée	Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24354-1 élevée	Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24355-1 élevée	Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24356-1 élevée	Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24357-1 élevée	Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24359-1 élevée	Security update for go1.26	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24360-1 élevée	Security update for go1.27	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:24362-1 élevée	Security update for cpupower	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:4904-1 élevée	Security update for python, python-base, python-doc	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:4907-1 élevée	Security update for openssh8.4	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:4909-1 élevée	Security update for squid	27 oct. 2026build de 19:17 UTC
SUSE-SU-2026:4913-1 élevée	Security update for gcc7	27 oct. 2026build de 19:17 UTC
openSUSE-SU-2026:12268-1 élevée	azure-storage-azcopy-10.34.1-1.1 on GA media	27 oct. 2026build de 19:17 UTC
openSUSE-SU-2026:12271-1 élevée	kured-1.23.0-1.1 on GA media	27 oct. 2026build de 19:17 UTC
CVE-2026-116260 élevée	libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive	27 oct. 2026build de 07:13 UTC	26 oct. 2026
CVE-2026-104849 élevée	tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options	27 oct. 2026build de 07:13 UTC	2 oct. 2026
CVE-2026-116124 élevée	libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser	27 oct. 2026build de 01:25 UTC	26 oct. 2026
CVE-2026-105483 élevée	nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames	27 oct. 2026build de 01:25 UTC	23 oct. 2026
CVE-2026-55888 élevée	xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames	27 oct. 2026build de 01:25 UTC	23 oct. 2026
CVE-2026-110354 élevée	haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request	27 oct. 2026build de 01:25 UTC	22 oct. 2026
CVE-2026-110353 élevée	haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame	27 oct. 2026build de 01:25 UTC	22 oct. 2026
CVE-2026-98869 élevée	kernel: bpf: Infer zext_dst based on static register liveness analysis	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2023-7356 élevée	kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2026-111943 élevée	crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2026-113812 élevée	perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates	27 oct. 2026build de 01:25 UTC	20 oct. 2026
CVE-2025-71436 élevée	raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling	27 oct. 2026build de 01:25 UTC	20 oct. 2026
CVE-2026-112396 élevée	pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112258 élevée	gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112395 élevée	pillow: pillow: Information disclosure via crafted tiled TIFF image	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112394 élevée	pillow: pillow: Information disclosure via out-of-bounds read in raw decoders	27 oct. 2026build de 01:25 UTC	19 oct. 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.